040aa3b774
Barbican is NOT tls'ed, this is only for communicating with tls'd mariadb Change-Id: Ia9598095456f35585eafa68f665d2a763e208571
33 lines
1.6 KiB
YAML
33 lines
1.6 KiB
YAML
{{/*
|
|
Licensed under the Apache License, Version 2.0 (the "License");
|
|
you may not use this file except in compliance with the License.
|
|
You may obtain a copy of the License at
|
|
|
|
http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
Unless required by applicable law or agreed to in writing, software
|
|
distributed under the License is distributed on an "AS IS" BASIS,
|
|
WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
See the License for the specific language governing permissions and
|
|
limitations under the License.
|
|
*/}}
|
|
|
|
{{- define "metadata.annotations.job.db_sync" }}
|
|
{{- if .Values.helm3_hook }}
|
|
helm.sh/hook: post-install,post-upgrade
|
|
helm.sh/hook-weight: "-4"
|
|
{{- end }}
|
|
{{- end }}
|
|
|
|
{{- $podVolMounts := .Values.pod.mounts.barbican_db_sync.barbican_db_sync.volumeMounts | default list }}
|
|
{{- $podVolMounts = append $podVolMounts (dict "name" "db-sync-sh" "mountPath" "/tmp/simple_crypto_kek_rewrap.py" "subPath" "simple_crypto_kek_rewrap.py" "readOnly" true) }}
|
|
{{- $podVolMounts = append $podVolMounts (dict "name" "db-sync-conf" "mountPath" "/tmp/old_kek" "subPath" "old_kek" "readOnly" true) }}
|
|
|
|
{{- if .Values.manifests.job_db_sync }}
|
|
{{- $dbSyncJob := dict "envAll" . "serviceName" "barbican" "podVolMounts" $podVolMounts "podVols" .Values.pod.mounts.barbican_db_sync.barbican_db_sync.volumes "jobAnnotations" (include "metadata.annotations.job.db_sync" . | fromYaml) -}}
|
|
{{- if .Values.manifests.certificates -}}
|
|
{{- $_ := set $dbSyncJob "dbAdminTlsSecret" .Values.endpoints.oslo_db.auth.admin.secret.tls.internal -}}
|
|
{{- end -}}
|
|
{{ $dbSyncJob | include "helm-toolkit.manifests.job_db_sync" }}
|
|
{{- end }}
|